# FlowDroid

FlowDroid is a Static Application Security Testing product. It runs on-premises. Pricing is free.

FlowDroid is a context-, flow-, field-, object-sensitive and lifecycle-aware static taint analysis tool for Android applications.

## What is FlowDroid?

FlowDroid is a context-, flow-, field-, object-sensitive and lifecycle-aware static taint analysis tool for Android applications. Unlike many other static-analysis approaches for Android, FlowDroid aims for an analysis with very high recall and precision. To achieve this goal, two main challenges were addressed: increasing precision by building an analysis that is context-, flow-, field- and object-sensitive, and increasing recall by creating a complete model of Android’s app lifecycle. The analysis is based on Soot and Heros, utilizing a precise callgraph for flow- and context-sensitivity, and IFDS-based flow functions for field- and object-sensitivity. An accurate and efficient alias search is crucial for context-sensitivity in conjunction with field-sensitivity.

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Static Application Security Testing](https://cybersectools.com/categories/sast)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- Website: blogs.uni-paderborn.de

## Where it ranks

FlowDroid is not a pick on the current [Best SAST Solutions for Business](https://cybersectools.com/shortlists/best-sast-solutions).

## FlowDroid FAQ

### What is FlowDroid?

FlowDroid is a product in the Static Application Security Testing category.

### What is the pricing for FlowDroid?

FlowDroid is free. Download and setup instructions are at https://blogs.uni-paderborn.de/sse/tools/flowdroid/.

### What are alternatives to FlowDroid?

Alternatives to FlowDroid listed on CybersecTools:

1. [Flyingduck Code Security Intelligence](https://cybersectools.com/tools/flyingduck-code-security-intelligence) - SAST tool that detects logical flaws and business logic vulnerabilities (Commercial)
2. [Vidoc SecureAI](https://cybersectools.com/tools/vidoc-secureai) - Real-time vulnerability detection and automated fixing for AI-generated code (Commercial)
3. [Snyk Code](https://cybersectools.com/tools/snyk-code) - AI-powered SAST tool that finds and auto-fixes code vulnerabilities in real-time (Commercial)
4. [SonarSource SonarQube](https://cybersectools.com/tools/sonarqube-server) - Code quality and security platform with SAST, SCA, and AI-powered remediation (Commercial)
5. [Semgrep Code](https://cybersectools.com/tools/semgrep-code) - SAST solution that scans 30+ languages to find and fix code vulnerabilities (Commercial)

Compare all FlowDroid alternatives at [https://cybersectools.com/alternatives/flowdroid](https://cybersectools.com/alternatives/flowdroid)

### What deployment and organization size does FlowDroid fit?

FlowDroid is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare FlowDroid with similar solutions

- [FlowDroid vs Flyingduck Code Security Intelligence](https://cybersectools.com/compare/flowdroid-vs-flyingduck-code-security-intelligence)
- [FlowDroid vs Vidoc SecureAI](https://cybersectools.com/compare/flowdroid-vs-vidoc-secureai)
- [FlowDroid vs Snyk Code](https://cybersectools.com/compare/flowdroid-vs-snyk-code)

All alternatives to FlowDroid: [/alternatives/flowdroid](https://cybersectools.com/alternatives/flowdroid)

---

Source: https://cybersectools.com/tools/flowdroid

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on FlowDroid: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md